# Top

**URL:** https://discuss.elastic.co/top.md?page=575&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 576

---

## [Unable to connect port http://localhost:9200 in IE11](https://discuss.elastic.co/t/unable-to-connect-port-http-localhost-9200-in-ie11/70944)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 4\
**Last updated:** [January 10, 2017, 6:37am UTC](https://discuss.elastic.co/t/unable-to-connect-port-http-localhost-9200-in-ie11/70944 "2017-01-10T06:37:08Z")

</div>

HI everyone, I stared the elasticsearch 2.4.3 in command prompt in windows it is up and running but when i accessed it through its port (http://locahost:9200) in Internet Explorer 11 it is showing error like this..

---

## [Persistent Queues - invitation for beta testing!](https://discuss.elastic.co/t/persistent-queues-invitation-for-beta-testing/72705)

<div class="topic-metadata">

**Author:** [@alvin](https://discuss.elastic.co/u/alvin)\
**Replies:** 5\
**Last updated:** [March 16, 2017, 7:39am UTC](https://discuss.elastic.co/t/persistent-queues-invitation-for-beta-testing/72705 "2017-03-16T07:39:56Z")

</div>

Logstash 5.1 introduced an exciting new feature called Persistent Queues (PQs), which provides two main benefits to Logstash users: Message durability - protection against in-flight data loss. All incoming events wil…

---

## [Timezone-affected date histogram](https://discuss.elastic.co/t/timezone-affected-date-histogram/154822)

<div class="topic-metadata">

**Author:** [@Vorta](https://discuss.elastic.co/u/Vorta)\
**Replies:** 2\
**Last updated:** [October 31, 2018, 11:47am UTC](https://discuss.elastic.co/t/timezone-affected-date-histogram/154822 "2018-10-31T11:47:27Z")

</div>

Hello! I have a following query coming from PHP: { "size": 0, "aggs": { "statuses\_histogram": { "date\_histogram": { "field": "created\_at", "interval": "1d", "min\_doc\_count": 0, …

---

## [\[ANNOUNCEMENT\] Free Relevant Search Lunch & Learns for your dev team](https://discuss.elastic.co/t/announcement-free-relevant-search-lunch-learns-for-your-dev-team/56924)

<div class="topic-metadata">

**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\
**Replies:** 0\
**Last updated:** [August 1, 2016, 7:16pm UTC](https://discuss.elastic.co/t/announcement-free-relevant-search-lunch-learns-for-your-dev-team/56924 "2016-08-01T19:16:13Z")

</div>

We're starting up a program where I, the author of Relevant Search, will happily help you staff your dev team's lunch and learns. Here's the deal: I have a set of prepared relevance/search/Elasticsearch/Lucene talks t…

---

## [Import dashboards sample](https://discuss.elastic.co/t/import-dashboards-sample/90947)

<div class="topic-metadata">

**Author:** [@abrejuin](https://discuss.elastic.co/u/abrejuin)\
**Replies:** 8\
**Last updated:** [June 29, 2017, 3:32am UTC](https://discuss.elastic.co/t/import-dashboards-sample/90947 "2017-06-29T03:32:44Z")

</div>

Hello, After installed Metricbeat on a Windows server, I can get metricbeat logs in my elasticsearch. Now, I want to import Metricbeat dashboards but I am failing with this error : ./import\_dashboards -es "http://loc…

---

## [Shield is not working!](https://discuss.elastic.co/t/shield-is-not-working/55833)

<div class="topic-metadata">

**Author:** [@sukesh](https://discuss.elastic.co/u/sukesh)\
**Replies:** 8\
**Last updated:** [January 19, 2017, 10:49pm UTC](https://discuss.elastic.co/t/shield-is-not-working/55833 "2017-01-19T22:49:03Z")

</div>

i installed shield , restarted the ES and did all what ever procedure is mention https://www.elastic.co/guide/en/shield/current/getting-started.html in this link..but if anybody pointing my ES with my IP address in kiba…

---

## [Overwrite message field issue in grok match](https://discuss.elastic.co/t/overwrite-message-field-issue-in-grok-match/259300)

<div class="topic-metadata">

**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\
**Replies:** 3\
**Last updated:** [December 22, 2020, 2:22pm UTC](https://discuss.elastic.co/t/overwrite-message-field-issue-in-grok-match/259300 "2020-12-22T14:22:03Z")

</div>

i want to overwrite message field , but it only overwrites last match i.e. IP and is not overwriting first match i.e. number \`input { stdin{} } filter { grok { match =\> { "message" =\> "%{DATA}(?\<message\>(\\d{9,12})|…

---

## [Filter returns 0 hits. Why?](https://discuss.elastic.co/t/filter-returns-0-hits-why/140952)

<div class="topic-metadata">

**Author:** [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\
**Replies:** 3\
**Last updated:** [July 24, 2018, 9:43am UTC](https://discuss.elastic.co/t/filter-returns-0-hits-why/140952 "2018-07-24T09:43:52Z")

</div>

Hello! Just trying to get familiar with Query DSL. While having some index http://localhost:9200/\_search?q=status:Published returns me all records with status field equal to Published. And it's fine. But when I try…

---

## [Elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error](https://discuss.elastic.co/t/elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/318291)

<div class="topic-metadata">

**Author:** [@Zay\_Lin\_Htun](https://discuss.elastic.co/u/Zay_Lin_Htun)\
**Replies:** 5\
**Last updated:** [November 7, 2022, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance-but-got-an-error/318291 "2022-11-07T08:49:19Z")

</div>

My Logstash can not connect to Elastic Search. My Logstash beats.conf config input { beats { port =\> 5044 } } output { elasticsearch { hosts =\> \["18.00.00.00:9200"\] } stdout { codec =\> rubydebug } } My Fil…

---

## [Connect Kibana to Elasticsearch](https://discuss.elastic.co/t/connect-kibana-to-elasticsearch/118111)

<div class="topic-metadata">

**Author:** [@Xi\_Zhu](https://discuss.elastic.co/u/Xi_Zhu)\
**Replies:** 2\
**Last updated:** [February 3, 2018, 9:28pm UTC](https://discuss.elastic.co/t/connect-kibana-to-elasticsearch/118111 "2018-02-03T21:28:06Z")

</div>

Hi, I can get the right response by curl -XGET 'localhost:9200/?pretty' { "name" : "RcPwG\_M", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "L6U8oE0pRdqHSMcmY6BshQ", "version" : { "number" : "6.1.3", …

---

## [AWS Load Balancer for Elasticsearch Cluster](https://discuss.elastic.co/t/aws-load-balancer-for-elasticsearch-cluster/100565)

<div class="topic-metadata">

**Author:** [@bobby259](https://discuss.elastic.co/u/bobby259)\
**Replies:** 2\
**Last updated:** [October 7, 2017, 11:05pm UTC](https://discuss.elastic.co/t/aws-load-balancer-for-elasticsearch-cluster/100565 "2017-10-07T23:05:36Z")

</div>

I have a 3 Master and 4 Data node cluster running on EC2 instances. I want to set-up a Load Balancer infront of my master nodes. While I try doing so, the application load balancer is failing to register the health of ma…

---

## [One to Many table relationship pre-processing](https://discuss.elastic.co/t/one-to-many-table-relationship-pre-processing/182007)

<div class="topic-metadata">

**Author:** [@jdemp0913](https://discuss.elastic.co/u/jdemp0913)\
**Replies:** 4\
**Last updated:** [May 21, 2019, 9:26pm UTC](https://discuss.elastic.co/t/one-to-many-table-relationship-pre-processing/182007 "2019-05-21T21:26:30Z")

</div>

We have a use case where we need to query and join two database tables in a 1-to-many relationship and upload and index those documents (records) to ElasticSearch every 3 minutes for use by a Kibana dashboard. The total…

---

## [Divide 2 metrics in kibana](https://discuss.elastic.co/t/divide-2-metrics-in-kibana/205378)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 1\
**Last updated:** [October 28, 2019, 5:41pm UTC](https://discuss.elastic.co/t/divide-2-metrics-in-kibana/205378 "2019-10-28T17:41:29Z")

</div>

Hi. I have 2 metrics that shows unique count of users and total streamed time. I wanna have avg streamed time per client. How can I divide these 2 metrics ? some pipeline aggregation or script ? Thanx a lot

---

## [\`host.name\` and \`host.hostname\`](https://discuss.elastic.co/t/host-name-and-host-hostname/339742)

<div class="topic-metadata">

**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\
**Replies:** 3\
**Last updated:** [August 3, 2023, 9:24pm UTC](https://discuss.elastic.co/t/host-name-and-host-hostname/339742 "2023-08-03T21:24:27Z")

</div>

What kind of values are folks using for host.name and host.hostname? Basically I think ECS is encouraging FQDN in host.name and short name in host.hostname?

---

## [Issue/bugs with High Level Rest Client](https://discuss.elastic.co/t/issue-bugs-with-high-level-rest-client/116828)

<div class="topic-metadata">

**Author:** [@Manish\_Bansal](https://discuss.elastic.co/u/Manish_Bansal)\
**Replies:** 3\
**Last updated:** [February 9, 2018, 1:07pm UTC](https://discuss.elastic.co/t/issue-bugs-with-high-level-rest-client/116828 "2018-02-09T13:07:48Z")

</div>

Hi There, I am new to Elasticsearch and this forum as well, I am facing a strange issue with my hello world example with Elasticsearch High level Rest API Java Client. this might be an issue with the API or I may not b…

---

## [ElasticSearch roadmap?](https://discuss.elastic.co/t/elasticsearch-roadmap/2803)

<div class="topic-metadata">

**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\
**Replies:** 3\
**Last updated:** [December 29, 2014, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-roadmap/2803 "2014-12-29T14:29:22Z")

</div>

Is there any roadmap for ElasticSearch? I know, I know... this project has been just released but I would welcome some perspective on where it is heading and what are the plans about integration with other existing …

---

## [Automatic @timestamp in datastream](https://discuss.elastic.co/t/automatic-timestamp-in-datastream/286381)

<div class="topic-metadata">

**Author:** [@ggab31](https://discuss.elastic.co/u/ggab31)\
**Replies:** 2\
**Last updated:** [October 13, 2021, 12:21am UTC](https://discuss.elastic.co/t/automatic-timestamp-in-datastream/286381 "2021-10-13T00:21:04Z")

</div>

Hi The documentation says that documents must contain a @timestamp field in order to be accepted by a datastream. I'm trying to make it optional by declaring a default ingest\_pipeline in a datastream template that will…

---

## [ScalaMapFieldExtractor Cannot extract value from entity](https://discuss.elastic.co/t/scalamapfieldextractor-cannot-extract-value-from-entity/88530)

<div class="topic-metadata">

**Author:** [@simonlucalandi](https://discuss.elastic.co/u/simonlucalandi)\
**Replies:** 2\
**Last updated:** [June 7, 2017, 2:04pm UTC](https://discuss.elastic.co/t/scalamapfieldextractor-cannot-extract-value-from-entity/88530 "2017-06-07T14:04:07Z")

</div>

Hello there. I have an RDD\[SubscriptionInfo\] wher SubscriptionInfo is a defined as a case class . I'm trying to save the rdd to ES and I want to specify the \_id to use, so I'm using something like this: rdd.saveToEs(…

---

## [URL field clickable in the chart](https://discuss.elastic.co/t/url-field-clickable-in-the-chart/67929)

<div class="topic-metadata">

**Author:** [@Sunitha](https://discuss.elastic.co/u/Sunitha)\
**Replies:** 2\
**Last updated:** [December 6, 2016, 9:57am UTC](https://discuss.elastic.co/t/url-field-clickable-in-the-chart/67929 "2016-12-06T09:57:36Z")

</div>

Hi, Is there a way to integrate an URL field as clickable in the chart ? To be precise, i have url field and corresponding company information. So directly from the chart, is it possible to redirect to the link specif…

---

## [Can we send jenkins Build console logs to Kibana using filebeat](https://discuss.elastic.co/t/can-we-send-jenkins-build-console-logs-to-kibana-using-filebeat/280547)

<div class="topic-metadata">

**Author:** [@Harindra\_Balanagired](https://discuss.elastic.co/u/Harindra_Balanagired)\
**Replies:** 7\
**Last updated:** [August 12, 2021, 5:47am UTC](https://discuss.elastic.co/t/can-we-send-jenkins-build-console-logs-to-kibana-using-filebeat/280547 "2021-08-12T05:47:08Z")

</div>

Can we send Jenkins Build console output to Kibana using the filebeat you figure out in the image? based on timestamp see highlighted time in that image. Based on the timestamp can we create a dashboard

---

## [Send multiple log files to elastic via filebeat](https://discuss.elastic.co/t/send-multiple-log-files-to-elastic-via-filebeat/83202)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 1\
**Last updated:** [April 24, 2017, 8:31am UTC](https://discuss.elastic.co/t/send-multiple-log-files-to-elastic-via-filebeat/83202 "2017-04-24T08:31:01Z")

</div>

I want to send multiple log files from filebeat to elastic. Like this, filebeat.prospectors: - input\_type: log paths: - /var/log/postgresql/postgresql-2017-04-21\_120121.log document\_type: postgres…

---

## [Import/Export dashboard not working](https://discuss.elastic.co/t/import-export-dashboard-not-working/205404)

<div class="topic-metadata">

**Author:** [@Gayathri.Srivathsan](https://discuss.elastic.co/u/Gayathri.Srivathsan)\
**Replies:** 8\
**Last updated:** [November 15, 2019, 9:57am UTC](https://discuss.elastic.co/t/import-export-dashboard-not-working/205404 "2019-11-15T09:57:33Z")

</div>

Iam trying to export my kibana dashboard along with few visualisation so that I can import it in kibana running on another environment. When I import it , I am getting my visualisation but without any data. Its a blank p…

---

## [\[Kibana\] group by request?](https://discuss.elastic.co/t/kibana-group-by-request/21271)

<div class="topic-metadata">

**Author:** [@stephanos](https://discuss.elastic.co/u/stephanos)\
**Replies:** 4\
**Last updated:** [December 23, 2014, 7:40pm UTC](https://discuss.elastic.co/t/kibana-group-by-request/21271 "2014-12-23T19:40:05Z")

</div>

Hey there, we are using Google App Engine to host our SaaS app. Google offers a nice log browser but it is way too sloooow. So one of my colleagues suggested we pipe our logs to logstash and make them accessible v…

---

## [Elastic SQL and cURL not playing nice](https://discuss.elastic.co/t/elastic-sql-and-curl-not-playing-nice/204971)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 5\
**Last updated:** [October 24, 2019, 6:09pm UTC](https://discuss.elastic.co/t/elastic-sql-and-curl-not-playing-nice/204971 "2019-10-24T18:09:07Z")

</div>

I'm having the hardest time trying to figure out what i'm doing wrong here and hope that someone else has some pointers I can run the following query in Dev Tools POST \_sql { "query": "SELECT agent.hostname AS HOST, …

---

## [Kibana4 and module 'jade' fail](https://discuss.elastic.co/t/kibana4-and-module-jade-fail/24087)

<div class="topic-metadata">

**Author:** [@vassav](https://discuss.elastic.co/u/vassav)\
**Replies:** 5\
**Last updated:** [June 29, 2015, 6:02pm UTC](https://discuss.elastic.co/t/kibana4-and-module-jade-fail/24087 "2015-06-29T18:02:21Z")

</div>

On first run Kibana 4.1.0 i got error: "Error: Cannot find module 'jade' at Function.Module.\_resolveFilename (module.js:338:15) at Function.Module.\_load (module.js:280:25) at Module.require (module.js:364:17…

---

## [Can i use multiple hosts of same elasticsearch cluster in Kibana 4](https://discuss.elastic.co/t/can-i-use-multiple-hosts-of-same-elasticsearch-cluster-in-kibana-4/26546)

<div class="topic-metadata">

**Author:** [@Kuldip\_Madnani](https://discuss.elastic.co/u/Kuldip_Madnani)\
**Replies:** 3\
**Last updated:** [November 16, 2015, 9:47am UTC](https://discuss.elastic.co/t/can-i-use-multiple-hosts-of-same-elasticsearch-cluster-in-kibana-4/26546 "2015-11-16T09:47:32Z")

</div>

Hi, I am planning to configure elasticsearch\_url property of kibana.yml to have multiple nodes of same elastic search cluster so that in case one node is down other one is utilized.Is there a way to do it without modif…

---

## [Disable Log4j rotation](https://discuss.elastic.co/t/disable-log4j-rotation/68881)

<div class="topic-metadata">

**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\
**Replies:** 6\
**Last updated:** [December 14, 2016, 7:45am UTC](https://discuss.elastic.co/t/disable-log4j-rotation/68881 "2016-12-14T07:45:06Z")

</div>

Hi, I use Elasticsearch 5.1. I want to disable the rotation of Elasticsearch log file made by Log4j but i don't know how log4j work so i ask here. How can i do that ?

---

## [ES Service Will Not Start After 5.0 Upgrade on CentOS](https://discuss.elastic.co/t/es-service-will-not-start-after-5-0-upgrade-on-centos/64164)

<div class="topic-metadata">

**Author:** [@Sophitia](https://discuss.elastic.co/u/Sophitia)\
**Replies:** 6\
**Last updated:** [October 27, 2016, 11:48pm UTC](https://discuss.elastic.co/t/es-service-will-not-start-after-5-0-upgrade-on-centos/64164 "2016-10-27T23:48:39Z")

</div>

I am new to ES. I have a single node running 2.4 as a POC. I upgraded my 2.4 node to 5.0 but the service will not start. Here is some additional information service elasticsearch status -v ● elasticsearch.service …

---

## [.monitoring-es - increase retention?](https://discuss.elastic.co/t/monitoring-es-increase-retention/218344)

<div class="topic-metadata">

**Author:** [@TNO](https://discuss.elastic.co/u/TNO)\
**Replies:** 1\
**Last updated:** [February 11, 2020, 2:57pm UTC](https://discuss.elastic.co/t/monitoring-es-increase-retention/218344 "2020-02-11T14:57:56Z")

</div>

Hi, We're using Elastic Cloud and have a deployment with 3 zones. When going to Kibana-\>Monitoring-\>Overview we only have 2 days worth of data. I also only see indices for two days when GETing: \_cat/indices (.monito…

---

## [Calculate values over aggregation results](https://discuss.elastic.co/t/calculate-values-over-aggregation-results/184556)

<div class="topic-metadata">

**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\
**Replies:** 4\
**Last updated:** [June 14, 2019, 10:53pm UTC](https://discuss.elastic.co/t/calculate-values-over-aggregation-results/184556 "2019-06-14T22:53:47Z")

</div>

Hello, I am trying to ‘minus’ operation after below terms aggregation. GET test02/\_search { "aggs": { "txid\_aggs": { "terms": { "field": "txid.keyword", "size": 10 }, "aggs": { …

---

## [Log4j 2 json parsing with logstash 1.4.2](https://discuss.elastic.co/t/log4j-2-json-parsing-with-logstash-1-4-2/58906)

<div class="topic-metadata">

**Author:** [@madhawa1984](https://discuss.elastic.co/u/madhawa1984)\
**Replies:** 4\
**Last updated:** [August 26, 2016, 12:56pm UTC](https://discuss.elastic.co/t/log4j-2-json-parsing-with-logstash-1-4-2/58906 "2016-08-26T12:56:51Z")

</div>

I am using log4j 2 along with json pattern layout to create the logs and using the logstash agent 1.4.2 to port the logs in to a redis. In my logs i am trying to log some json payloads which includes some nested json. A…

---

## [How can I connect two Elastic silos together?](https://discuss.elastic.co/t/how-can-i-connect-two-elastic-silos-together/183236)

<div class="topic-metadata">

**Author:** [@dhourani](https://discuss.elastic.co/u/dhourani)\
**Replies:** 1\
**Last updated:** [May 29, 2019, 6:38am UTC](https://discuss.elastic.co/t/how-can-i-connect-two-elastic-silos-together/183236 "2019-05-29T06:38:48Z")

</div>

I have two teams each running their Elastic deployments and I need to have a centralized way of accessing the data and run my ML algorithms. I'm thinking maybe data virtualization could do this ? Please help.

---

## [Google App engine?](https://discuss.elastic.co/t/google-app-engine/4228)

<div class="topic-metadata">

**Author:** [@Barsk](https://discuss.elastic.co/u/Barsk)\
**Replies:** 7\
**Last updated:** [April 19, 2011, 2:02am UTC](https://discuss.elastic.co/t/google-app-engine/4228 "2011-04-19T02:02:50Z")

</div>

Is it possible to run an ES cluster in Google App Engine?

---

## [Set Href Query String in Vega](https://discuss.elastic.co/t/set-href-query-string-in-vega/227395)

<div class="topic-metadata">

**Author:** [@jmrozi1](https://discuss.elastic.co/u/jmrozi1)\
**Replies:** 5\
**Last updated:** [April 30, 2020, 2:24pm UTC](https://discuss.elastic.co/t/set-href-query-string-in-vega/227395 "2020-04-30T14:24:48Z")

</div>

I figured out how to make it so text acts as a URL: marks: \[ { type: "text", encode: { enter: { href: { value: "/path/from/base/href/\<dashboard ID\>/?myParam=myValue" }}} } \] The prob…

---

## [Set ES\_MIN\_MEM in elasticsearch.yml not work](https://discuss.elastic.co/t/set-es-min-mem-in-elasticsearch-yml-not-work/13442)

<div class="topic-metadata">

**Author:** [@lijionly](https://discuss.elastic.co/u/lijionly)\
**Replies:** 4\
**Last updated:** [September 6, 2013, 3:15am UTC](https://discuss.elastic.co/t/set-es-min-mem-in-elasticsearch-yml-not-work/13442 "2013-09-06T03:15:19Z")

</div>

Hi, I'm using elasticsearch 0.90.2, install elasticsearch with wrapper. And modify elasticsearch.yml as below: ES\_MIN\_MEM: 2048m ES\_MAX\_MEM: 2048m restart elasticsearch service. check es process and found it sta…

---

## [K8s (kubernetes) sidecar considerations](https://discuss.elastic.co/t/k8s-kubernetes-sidecar-considerations/294393)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 5\
**Last updated:** [January 18, 2022, 2:29pm UTC](https://discuss.elastic.co/t/k8s-kubernetes-sidecar-considerations/294393 "2022-01-18T14:29:05Z")

</div>

Hi, At this moment we have a myriad of microservices running on-prem. However, we are preparing to move everything to tha cloud (k8s on aws). As a result I am redesigning our elastic platform since this will move to aws…

---

## [Search request not returning documents anymore](https://discuss.elastic.co/t/search-request-not-returning-documents-anymore/155138)

<div class="topic-metadata">

**Author:** [@Eric\_DUAULT](https://discuss.elastic.co/u/Eric_DUAULT)\
**Replies:** 5\
**Last updated:** [November 5, 2018, 11:49am UTC](https://discuss.elastic.co/t/search-request-not-returning-documents-anymore/155138 "2018-11-05T11:49:24Z")

</div>

I'm not able any more to find some documents in the indices. There are some documents having this field and value : "source" : "spectre\_supEvt". But a query in ElasticSearch filtering on the field and value return noth…

---

## [Confused about health information I received](https://discuss.elastic.co/t/confused-about-health-information-i-received/52358)

<div class="topic-metadata">

**Author:** [@dal](https://discuss.elastic.co/u/dal)\
**Replies:** 5\
**Last updated:** [June 9, 2016, 8:12pm UTC](https://discuss.elastic.co/t/confused-about-health-information-i-received/52358 "2016-06-09T20:12:27Z")

</div>

I am trying to follow a tutorial and as far as I know there should only be one running Elasticsearch instance and 3 documents added to 1 index. When I asked for health, it told me there are 2 nodes and 11 shards. { …

---

## [Pipe output plugin not passing event](https://discuss.elastic.co/t/pipe-output-plugin-not-passing-event/28130)

<div class="topic-metadata">

**Author:** [@jimmydigital](https://discuss.elastic.co/u/jimmydigital)\
**Replies:** 6\
**Last updated:** [January 19, 2017, 11:13pm UTC](https://discuss.elastic.co/t/pipe-output-plugin-not-passing-event/28130 "2017-01-19T23:13:12Z")

</div>

Hello.. I've written a python script to create tickets when certain SNMP traps are received. It works great at the command line when I cat a sample event into it.. but when run from logstash with the pipe plugin it's …

---

## [Fielddata memory usage](https://discuss.elastic.co/t/fielddata-memory-usage/229550)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 1\
**Last updated:** [April 24, 2020, 12:14am UTC](https://discuss.elastic.co/t/fielddata-memory-usage/229550 "2020-04-24T00:14:04Z")

</div>

Hi! I've a v7.2.1 ES cluster and trying to lower heap memory usage. When I checked GET /\_cat/fielddata I found a lot of non-text type fields in the list (e.g., "foo.keyword", "bar\_ip"). As far as I understood from the r…

---

## [Elasticsearch - Error Timeout 599](https://discuss.elastic.co/t/elasticsearch-error-timeout-599/38272)

<div class="topic-metadata">

**Author:** [@minniek](https://discuss.elastic.co/u/minniek)\
**Replies:** 4\
**Last updated:** [June 13, 2017, 7:27pm UTC](https://discuss.elastic.co/t/elasticsearch-error-timeout-599/38272 "2017-06-13T19:27:17Z")

</div>

Hello everyone! I am having some issues with Elasticsearch: FATAL : EXCEPTION Search::Elasticsearch::Error::Timeout: FATAL + | \[Timeout\] \*\* \[http://127.0.0.1:9200\]-\[599\] Timed out while waiting for socket to become rea…

---

## [How can we add new nodes in cluster at runtime?](https://discuss.elastic.co/t/how-can-we-add-new-nodes-in-cluster-at-runtime/27992)

<div class="topic-metadata">

**Author:** [@shoebalig](https://discuss.elastic.co/u/shoebalig)\
**Replies:** 5\
**Last updated:** [January 15, 2016, 11:56am UTC](https://discuss.elastic.co/t/how-can-we-add-new-nodes-in-cluster-at-runtime/27992 "2016-01-15T11:56:25Z")

</div>

Hi Members, I have a cluster using N nodes, to scale up my cluster I want to add few more nodes at runtime without any downtime. Is there anyway to add nodes in cluster using Cluster Update Settings? I am using unicast f…

---

## [Elasticsearch service gets killed](https://discuss.elastic.co/t/elasticsearch-service-gets-killed/243039)

<div class="topic-metadata">

**Author:** [@Abdul\_Hameed](https://discuss.elastic.co/u/Abdul_Hameed)\
**Replies:** 7\
**Last updated:** [July 31, 2020, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-service-gets-killed/243039 "2020-07-31T05:14:07Z")

</div>

Hi, I have a setup of ELK on one server. Elasticsearch service and kibana run fine until I start the logstash service. When I start logstash, elasticsearch gets killed instantly and I see this error: elasticsearch sys…

---

## [Can i read a formatted json file via filebeat?](https://discuss.elastic.co/t/can-i-read-a-formatted-json-file-via-filebeat/161015)

<div class="topic-metadata">

**Author:** [@fillic2002](https://discuss.elastic.co/u/fillic2002)\
**Replies:** 7\
**Last updated:** [December 17, 2018, 1:38pm UTC](https://discuss.elastic.co/t/can-i-read-a-formatted-json-file-via-filebeat/161015 "2018-12-17T13:38:29Z")

</div>

I see the beat is lightweight and don't want to go through logstash heavy processing pipeline. Is there a way i can use any beat to parse my json file and parse individual field as part of index column? i am reading many…

---

## [How to set path.data set to multiple paths within docker](https://discuss.elastic.co/t/how-to-set-path-data-set-to-multiple-paths-within-docker/204162)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 3\
**Last updated:** [November 5, 2019, 6:44am UTC](https://discuss.elastic.co/t/how-to-set-path-data-set-to-multiple-paths-within-docker/204162 "2019-11-05T06:44:51Z")

</div>

I found it is possible to configure path.data to multiple paths https://www.elastic.co/guide/en/elasticsearch/reference/master/path-settings.html I want to add ssd1+ssd2 as a disk to elastic-node1 and ssd3+4 to elasti…

---

## [Ingesting data from HDFS to ElasticSearch](https://discuss.elastic.co/t/ingesting-data-from-hdfs-to-elasticsearch/71507)

<div class="topic-metadata">

**Author:** [@mkarthikswamy](https://discuss.elastic.co/u/mkarthikswamy)\
**Replies:** 2\
**Last updated:** [January 18, 2017, 3:44pm UTC](https://discuss.elastic.co/t/ingesting-data-from-hdfs-to-elasticsearch/71507 "2017-01-18T15:44:47Z")

</div>

Hi, We have a Hadoop cluster in which a Spark job creates about 3 GB of data every hour in hour partitioned directories in HDFS. This data needs to be moved to ElasticSearch in the most efficient way. The following are t…

---

## [Reindex from remote error: Could not resolve host](https://discuss.elastic.co/t/reindex-from-remote-error-could-not-resolve-host/157216)

<div class="topic-metadata">

**Author:** [@pradla](https://discuss.elastic.co/u/pradla)\
**Replies:** 5\
**Last updated:** [November 26, 2018, 5:31am UTC](https://discuss.elastic.co/t/reindex-from-remote-error-could-not-resolve-host/157216 "2018-11-26T05:31:55Z")

</div>

Hi, I am trying to upgrade elasticsearch 1.4.4 to 6.5.0. Below are the steps I followed: Started a new 6.5.0 cluster in addition to existing 1.4.4 configured it to run with logstash 6.5.0 and it is running well. I am…

---

## [Logstash日志里频繁出现报错""undefined method \`sanitized' "](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079)

<div class="topic-metadata">

**Author:** [@haoyun](https://discuss.elastic.co/u/haoyun)\
**Replies:** 7\
**Last updated:** [December 24, 2018, 3:01am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079 "2018-12-24T03:01:22Z")

</div>

你好， 我的elk版本是5.6，logstash日志里频繁出现报错""undefined method \`sanitized' " 每次，刚开始启动的时候是一切正常的，然后慢慢就会出现下面这种报错，积攒到某一天，就会发现不往elastic里写索引数据了。这时候产看日志每天会有7 、 8 M都是刷这个错误。 然后我重启logstash就看似又恢复正常了！ 有没有什么好的解决办法？日志内容如下： \[2018-12-07T06:02…

---

## [Auditbeat failed to create audit client & failed to get audit status: operation not permitted](https://discuss.elastic.co/t/auditbeat-failed-to-create-audit-client-failed-to-get-audit-status-operation-not-permitted/231417)

<div class="topic-metadata">

**Author:** [@Luis\_Pereira1](https://discuss.elastic.co/u/Luis_Pereira1)\
**Replies:** 4\
**Last updated:** [May 7, 2020, 11:07pm UTC](https://discuss.elastic.co/t/auditbeat-failed-to-create-audit-client-failed-to-get-audit-status-operation-not-permitted/231417 "2020-05-07T23:07:58Z")

</div>

Hello, I'm trying to get my Auditbeat running and I keep getting this error: Exiting: 1 error: 1 error: failed to create audit client: failed to get audit status: operation not permitted My Auditbeat config looks li…

---

## [How to account for different number of blank spaces in Log4j logs?](https://discuss.elastic.co/t/how-to-account-for-different-number-of-blank-spaces-in-log4j-logs/53580)

<div class="topic-metadata">

**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\
**Replies:** 4\
**Last updated:** [June 21, 2016, 10:14pm UTC](https://discuss.elastic.co/t/how-to-account-for-different-number-of-blank-spaces-in-log4j-logs/53580 "2016-06-21T22:14:08Z")

</div>

I have the following log4j logs 2016-04-22 16:43:25,172 ERROR :SomeThread : 2 \[com.mycompany.SomeClass\] The Log Message. 2016-06-11 01:22:40,894 INFO :SomeThread1 : 0 \[com.mycompany.SomeClass1\] The Log message I hav…

[Previous page](https://discuss.elastic.co/top.md?page=574&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=576&per_page=50&period=all)
